PT-2024-36706

CVE-2024-56072

Published

2024-12-13

Updated

2024-12-26

Description by

CVSS 2.0

7.8

High

MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions FastNetMon Community Edition versions 1.2.7 and earlier

Description An issue was discovered in the sFlow v5 plugin, allowing remote attackers to cause a denial of service (application crash) via a crafted packet that specifies many sFlow samples.

Recommendations For FastNetMon Community Edition versions 1.2.7 and earlier, consider disabling the sFlow v5 plugin as a temporary workaround to prevent the denial of service issue until a patch is available.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-94: Improper Control of Generation of Code (\'Code Injection\')

CWE-369: Divide By Zero

Related identifiers

CVE-2024-56072